Epitaxy MCP server
not respondingxyz.crossgrain/epitaxy·v0.1.4Federal drug shortages and recalls joined to the federal contracts that buy those drugs.
0 stars34 downloads/wk
Reviews
Write oneNobody has reviewed Epitaxy yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Epitaxy tools (5)
write = sends, deletes, buys or postsget_data_freshnessFreeReturns when the data was last activated, how many segments are live, and the state of the last run. Call this first when you need to know whether the data is fresh.
get_supplier_exposureFreeThe join: a federal contract whose supplier has an FDA shortage or recall. Every row carries company_name, confidence (exact, probable or weak) and match_method. A cross source join is NEVER exact, because FDA and USAspending share no identifier. The claim is: this government supplier has an active FDA shortage or recall. It does NOT claim that this contract delivers that drug. Without a key you get exact and probable matches only, at most 20 rows, without the evidence field.
list_drug_recallsFreeFDA drug recalls and enforcement reports. Filters: classification (Class I, II, III), company_id, limit.
list_drug_shortagesFreeCurrent and resolved US drug shortages as reported by the FDA. Each row carries the generic name, the reporting company and its company_id. Filters: status, generic_name, company_id, limit.
list_federal_drug_contractsFreeUS federal contracts for drugs, product service code 6505, from USAspending. Filters: agency, company_id, limit.
Public scan report
scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned25/25
- Live reliabilityremote unreachable: TypeError: fetch failed0/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 50 days ago12/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
Findings (1)
- highRemote endpoint did not respond
reliability.unreachableTypeError: fetch failed
How Epitaxy compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 60/100
- higher than 15% of 48,243 servers
- Tools
- 5
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 11%
- of our recent checks; the typical remote server answers 100%
- Response time
- 204 ms
- faster than 66% of 30,027 servers
- Downloads a week
- 34
- more than 23% of 12,306 servers with a package
What its tools let an agent do: 5 read
Install Epitaxy in Claude Code, Cursor or VS Code
claude mcp add --transport http epitaxy https://drugs.crossgrain.xyz/v1/mcp
What the publisher says
From the Epitaxy repository's README, as published. We do not edit it. Read it on GitHub
epitaxy
mcp-name: xyz.crossgrain/epitaxy
Federal drug shortages and recalls, joined to the federal contracts that buy those drugs. One call, no signup.
What it claims: this government supplier has an active FDA shortage or recall. What it does not claim: that a specific contract supplies a specific drug. Federal contract descriptions average 47 characters and almost never name the drug, so we say so instead of pretending otherwise.
Try it now, no key
curl https://drugs.crossgrain.xyz/v1/exposure?limit=5One row of the answer, shortened:
{"exposure_id": "0026624dec7b6d9f",
"award_id": "SPE2DP25F109W",
"company_id": "a4fdd4a7530f4962",
"company_name": "TEVA PHARMACEUTICALS USA, INC.",
"company_key": "teva pharmaceuticals usa",
"shortage_id": "022c478fb3af28c4",
"confidence": "probable",
"match_method": "company_name_normalized"}MCP
Remote, nothing to install:
{ "mcpServers": { "epitaxy": { "url": "https://drugs.crossgrain.xyz/v1/mcp" } } }Local, stdio:
{ "mcpServers": { "epitaxy": { "command": "uvx", "args": ["epitaxy-mcp"] } } }Tools: getdatafreshness, listdrugshortages, listdrugrecalls, listfederaldrugcontracts, getsupplier_exposure.
Read the confidence field, always
Matching on both company and drug at once is not promoted to exact. Cross source joins are never exact, because FDA and USAspending share no identifier. Anyone claiming otherwise has a different source or is guessing.
Free tier
Works forever, no key, no signup. Returns at most 20 rows, without the evidence field, without weak matches, and with data delayed by 24 hours. Nothing is stored: no counters, no IP addresses. If a version that old does not exist yet, you get the oldest one available, so the free tier is never empty while data exists.
Addressing
These two addresses are the same segment and both work permanently:
https://drugs.crossgrain.xyz/v1/exposure
https://drugs.crossgrain.xyz/drugs/v1/exposureLater segments arrive as /devices/v1/..., /food/v1/... and so on. A path whose segment is reserved but not live yet answers 404 with segmentnotlive, it never returns another segment's data. An address that has been published is never withdrawn.
Paid
Sources and licence
- openFDA, public domain, CC0 1.0 Universal
- USAspending, public domain, code under CC0
Data is unvalidated and must not be used for medical decisions. This project is MIT licensed. Docs: https://drugs.crossgrain.xyz/docs
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-10-29downgradeA → Cscore 60: Remote endpoint did not respond
Epitaxy: common questions
- Is Epitaxy MCP server safe?
- With care: it is graded C, so read the findings first (60/100). Read the Epitaxy safety report
- How do I install Epitaxy?
- It runs remotely at drugs.crossgrain.xyz. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Epitaxy need an API key?
- Yes. The registry entry asks for
EPITAXY_API_KEY. - Is Epitaxy maintained?
- The last commit was 58 days ago (2026-09-08). The latest release is v0.1.4.
- Is Epitaxy up?
- 11% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Epitaxy compare with other MCP servers?
- safety score 60/100 (higher than 15% of 48,243 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.